
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5af3054e-61df-320b-911c-988ba8f3ae0c.roa
File: 5af3054e-61df-320b-911c-988ba8f3ae0c.roa (raw, json)
Hash identifier: B1CPWcQzeXEMn9W2l5BAAzr4jjySa1huzw93PN/Iw4E=
Subject key identifier: 03:9B:95:E4:F4:2C:F5:67:03:78:C4:FE:B3:D3:7D:EA:87:4C:58:4D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D386A6340D07E43E08E5712C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5af3054e-61df-320b-911c-988ba8f3ae0c.roa
Signing time: Thu 19 Mar 2026 13:00:41 +0000
ROA not before: Thu 19 Mar 2026 13:00:41 +0000
ROA not after: Wed 17 Jun 2026 13:00:41 +0000
asID: 396646
IP address blocks: 2001:503:c27::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:6a:63:40:d0:7e:43:e0:8e:57:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 19 13:00:41 2026 GMT
Not After : Jun 17 13:00:41 2026 GMT
Subject: CN=699a7ea8-9878-49bd-96a9-b7c5c08c13f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:04:8c:f2:7a:03:53:96:6b:2a:72:d8:83:92:
72:f3:93:c6:7e:36:46:c4:20:03:9b:f3:04:cc:02:
bc:71:f1:8f:16:81:82:14:d9:71:ca:6f:76:94:bf:
03:1b:e9:5f:6e:8f:71:eb:fd:2e:20:cd:67:5b:3c:
5d:1e:66:8e:bf:50:79:74:d5:56:49:47:f8:fd:92:
eb:30:39:8e:65:20:f6:30:0c:bf:2a:f2:8c:46:e8:
76:d0:0e:6b:d8:e3:33:18:5a:9d:67:4e:a5:07:53:
25:ea:cf:c9:64:2e:02:8a:b2:bc:8f:b9:db:a5:6b:
ea:7f:cc:94:5d:d4:60:e7:df:a7:7e:ec:d7:a6:04:
31:13:ec:1f:f7:9d:79:2b:a4:6b:f9:57:27:2b:ea:
c6:c3:27:b5:01:f9:03:21:8a:2f:28:4d:c9:4e:38:
87:8d:85:b1:44:3b:b6:a5:5b:64:cc:0c:21:f0:1c:
93:e3:7e:cc:8e:ca:25:ba:50:f9:30:e8:7c:dd:f0:
a4:3b:77:1a:f0:c9:62:4d:bd:81:90:5e:6a:15:f7:
6c:62:be:2d:45:fd:83:03:49:74:ef:9c:42:54:c1:
94:81:ae:79:05:11:6e:6d:88:6f:36:57:bf:77:74:
e4:fb:df:ef:0f:b2:e0:0a:19:88:a7:96:55:cf:a9:
3a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9B:95:E4:F4:2C:F5:67:03:78:C4:FE:B3:D3:7D:EA:87:4C:58:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5af3054e-61df-320b-911c-988ba8f3ae0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:c27::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:f7:0f:ce:51:34:ec:3d:a2:bf:a6:93:1a:57:f3:9e:56:2a:
2c:3d:c9:4e:cd:e4:28:76:b9:4d:13:69:5c:2c:49:29:20:9b:
b9:fe:40:e7:36:87:22:7c:4f:6a:fc:5c:59:40:d2:31:22:6d:
39:75:5b:cc:8e:06:11:45:0c:7d:c3:37:5b:c4:8b:32:cd:ee:
3f:58:3e:40:ad:fa:26:9b:a6:91:76:6d:db:57:38:50:f0:e8:
c0:8f:fa:bb:da:94:fd:b0:21:95:f2:b2:78:7c:3b:01:de:3d:
c6:5d:17:5e:95:6d:6c:dd:7e:e4:8b:61:3f:38:0e:72:d7:f0:
9f:f1:33:af:a1:da:dc:24:00:05:57:73:48:50:67:41:d6:16:
8b:f0:93:8b:15:0b:1f:04:a8:4c:5a:e0:aa:89:74:f7:cc:94:
87:69:1c:9b:ed:2c:7b:a9:1f:2f:87:a0:46:65:53:ba:55:81:
8e:c3:8c:51:97:b3:d4:fc:b8:91:e3:b9:3d:0b:2a:a9:cb:22:
97:cc:0d:a0:87:b2:b2:55:cf:f4:1c:74:94:d1:d3:23:ef:c6:
bd:d6:5e:be:84:3e:2e:1d:2d:46:23:66:f5:85:fe:23:61:3f:
f9:fd:1b:8b:83:66:93:10:18:a1:9a:f6:75:b8:e8:cb:2e:d2:
f1:a0:80:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:29:37 2026 by rpki-client